diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 50c7075..86d7547 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -1,24 +1,23 @@
 # 工作流名称，可自定义
 name: 自动部署
-
 # 事件监听，决定什么时候触发该工作流内的任务
 on:
   # 在master分支推动到github时触发
   push:
     branches: [ master ]
-
 # 任务集合，可包含多个任务
 jobs:
   # 任务名称
   build:
     # 运行的操作系统
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: read
+      pull-requests: write
     # 步骤集合，可包含多个步骤
     steps:
       # 单个步骤，没有名称，直接使用一个action
       - uses: actions/checkout@v2
-
       # 单个步骤，带有名称，带有参数
       - name: build and deploy
         run: |
diff --git a/src/style/arco-design.less b/src/style/arco-design.less
index 279f97e..a8ba1db 100644
--- a/src/style/arco-design.less
+++ b/src/style/arco-design.less
@@ -30,7 +30,7 @@ body {
         margin-right: 8px;
       }
       .arco-menu-inline-header:hover {
-        background-color: var(--color-neutral-2);
+        background-color: var(--color-fill-2);
       }
     }
   }
@@ -75,8 +75,8 @@ body {
   }
   .arco-menu {
     .arco-menu-item {
-      &.arco-menu-selected {
-        background-color: @arcoblue-8;
+      &.arco-menu-selected, &:hover {
+        background-color: var(--color-fill-2);
       }
     }
   }